AMENDMENTS TO THE CLAIMS 

1. (Currently Amended) A computer-implemented method for 
analyzing a virtual function, said method comprising: 

locating a virtual table for a virtual function, said virtual table 
comprising a start address for said virtual function; 

determining a call typo for Gaid virtual function; 

creating an instruction for said virtual function, said instruction 
comprising a control transfer function that directs execution to 
instrumentation code; and 

rewriting said virtual table with a modified virtual table comprising 
an address for said instruction instead of said start address; 

loading s aid address for said instruction [[,]] whoroin upon 
determining that a call to said virtual function is a virtual function call. 
thereby directing ex ecution to said instrumentation code: and 

executing said instru mentation code to perform an instrumentation 
task for said virtual function [[,]] paid addrcoo for paid inctruotion io loaded. 



2-4. (Canceled). 



5. (Currently Amended) The computer-implemented method for 
analyzing a virtual function as recited in Claim 1 [[4]] further comprising: 

performing a desired instrumentation task by paid inotrumcntor ; and 
resuming execution by paid inptrumcntor at said start address 
previously contained in said virtual table. 

6. (Currently Amended) The computer-implemented method for 
analyzing a virtual function as recited in Claim 1 [[4]] further comprising: 

overwriting said instrumentation code with instrumentation code 
which performs a desired instrumentation task; and 
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providing an instruction at the end of said instrumentation code 
wherein said instruction points back to said start address previously 
contained in said virtual table. 

7. (Original) The computer-implemented method for analyzing a 
virtual function as recited in Claim 1 further comprising: 

determining from which location said virtual function has been 

called. 

8. (Currently Amended) The computer-implemented method for 
analyzing a virtual function as recited in Claim 1 [[4]] further comprising: 

maintaining a mapping between said start address for said virtual 
function and said address for said instruction. 

9. (Currently Amended) A computer-readable medium embodying 
instructions that cause a computer to perform a method for analyzing a 
virtual function, said method comprising: 

locating a virtual table for a virtual function, said virtual table 
comprising a start address for said virtual function; 

dotormining a call typo for oaid a virtual function; 

creating an instruction for said virtual function, said instruction 
comprising a control transfer function that directs execution to 
instrumentation code; a»d 

rewriting said virtual table with a modified virtual table comprising 
an address for said instruction instead of said start address; 

loading said addres s for said instruction [[,]] whoroin upon 
determining that a call to said virtual function is a virtual function call. 
thereby directing e xecution to said instrumentation code: and 

executing said instrumentation code to perform an instrumentation 
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task for said virtual function [[,]] paid addrcoo for paid inotruction io loaded. 
10-12. (Canceled). 

13. (Currently Amended) The computer-readable medium of Claim 9 
4-2 further comprising instructions that cause said computer to perform said 
method further comprising: 

performing a desired instrumentation task by paid inptrumcntor ; and 
resuming execution by paid inptrumcntor at said start address 
previously contained in said virtual table. 

14. (Currently Amended) The computer-readable medium of Claim 9 
13 further comprising instructions that cause said computer to perform said 
method further comprising: 

overwriting said instrumentation code with instrumentation code 
which performs a desired instrumentation task; and 

providing an instruction at the end of said instrumentation code 
wherein said instruction points back to said start address previously 
contained in said virtual table. 

15. (Previously Presented) The computer-readable medium of Claim 
9 further comprising instructions that cause said computer to perform said 
method further comprising: 

determining from which location said virtual function has been 

called. 
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16. (Currently Amended) The computer-readable medium of Claim 9 
43 further comprising instructions that cause said computer to perform said 
method further comprising: 

maintaining a mapping between said start address for said virtual 
function and said address for said instruction. 

17. (Currently Amended) An apparatus for analyzing a virtual 
function, said apparatus comprising: 

means for locating a virtual table for a virtual function, said virtual 
table comprising a start address for said virtual function; 

moano for determining a call typo for oaid a virtual function; 

means for creating an instruction for said virtual function, said 
instruction comprising a control transfer function that directs execution to 
instrumentation code; and 

means for rewriting said virtual table with a modified virtual table 
comprising an address for said instruction instead of said start address: 

means for loading sa id address for said instruction [[,]] wherein upon 
determining that a call to said virtual function is a virtual function call. 
thereby directing execution to said instrumentation code: and 

means for executing s aid instrumentation code to perform an 
instrumentation tas k for said virtual function [[,]] said addrooa for paid 
inotruction io loaded. 

18-20. (Canceled). 

21. (Currently Amended) The apparatus of Claim 17 20 for 
analyzing a virtual function, said apparatus further comprising: 

means for performing a desired instrumentation task by said 
instrumentor; and 
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means for resuming execution by said instrumentor at said start 
address previously contained in said virtual table. 

22. (Currently Amended) The apparatus of Claim 17 20 for 
analyzing a virtual function, said apparatus further comprising: 

means for overwriting said instrumentation code with 
instrumentation code which performs a desired instrumentation task; and 

means for providing an instruction at the end of said instrumentation 
code wherein said instruction points back to said start address previously 
contained in said virtual table. 

23. (Original) The apparatus of Claim 17 for analyzing a virtual 
function, said apparatus further comprising: 

means for determining from which location said virtual function has 
been called. 

24. (Currently Amended) The apparatus of Claim 17 30 for 
analyzing a virtual function, said apparatus further comprising: 

means for maintaining a mapping between said start address for said 
virtual function and said new address for said virtual function. 
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